VulnerabilityModified
CVE-2021-3965
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
HIGH 7.5EPSS 5.24%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 5.24% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-639
- Affected
- hp/designjet t920 cr355a firmware · hp/designjet t920 cr355b firmware · hp/designjet t920 cr354a firmware · hp/designjet t930 l2y22a firmware · hp/designjet t930 l2y22b firmware · hp/designjet t930 l2y21a firmware · hp/designjet t930 l2y21b firmware · hp/designjet t1530 l2y24a firmware · hp/designjet t1530 l2y24b firmware · hp/designjet t1530 l2y23a firmware · hp/designjet t2530 l2y25a firmware · hp/designjet t2530 l2y26a firmware · hp/designjet t2530 l2y26b firmware · hp/designjet t3500 b9e24a firmware · hp/designjet t3500 b9e24b firmware · hp/designjet t3500 b9e25a firmware · hp/designjet z6800 f2s72a firmware · hp/designjet z6800 f2s72ar firmware · hp/designjet z6800 f2s72b firmware · hp/designjet z6600 f2s71a firmware · +7 more
- Source
- hp-security-alert@hp.com
References
- https://support.hp.com/us-en/document/ish_5268198-5268230-16Vendor Advisory
- https://support.hp.com/us-en/document/ish_5268198-5268230-16Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.